Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313532313739.roa
File:                     3136342e33372e3231362e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          VhE0E2MRdy0X1Ev6IQm50mYvY5oZ2iixLIIDrwDppIc=
Subject key identifier:   F9:1B:0D:48:D1:1B:0F:03:AF:55:EC:E3:D1:5C:E1:1E:72:A8:3F:50
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6B58FA7AA6B6E32584BF23D826320FE52BEC1FED
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313532313739.roa
Signing time:             Wed 14 Oct 2026 06:26:11 +0000
ROA not before:           Wed 14 Oct 2026 06:21:11 +0000
ROA not after:            Wed 13 Oct 2027 06:26:11 +0000
asID:                     152179
IP address blocks:        164.37.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:fa:7a:a6:b6:e3:25:84:bf:23:d8:26:32:0f:e5:2b:ec:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 14 06:21:11 2026 GMT
            Not After : Oct 13 06:26:11 2027 GMT
        Subject: CN=F91B0D48D11B0F03AF55ECE3D15CE11E72A83F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:ff:69:ff:39:4a:49:ed:88:22:91:8d:e5:
                    f2:93:0c:4d:0b:7d:87:6b:66:c6:5b:f5:7b:ce:5d:
                    76:58:80:3c:14:fc:5f:cb:c7:84:d8:cb:3e:03:7f:
                    a1:a8:aa:ec:73:67:53:58:db:d3:c8:11:1f:a9:71:
                    f1:73:5e:ec:c2:93:30:10:c9:91:1a:7d:03:45:28:
                    61:6c:51:3e:1a:50:cc:a4:0d:e2:6e:d0:91:71:c3:
                    bd:ff:03:98:10:11:b4:e3:0b:30:f9:68:0b:ab:b7:
                    57:e1:68:74:3c:ec:fa:31:5a:e3:47:94:6e:2b:98:
                    6c:87:e0:e6:36:8a:bf:8c:58:f9:a4:8a:d3:2b:a1:
                    42:66:43:80:5d:34:bb:be:a5:b9:ef:47:8c:f2:77:
                    14:8d:2d:0d:96:34:06:80:b3:25:f0:94:6b:23:a4:
                    05:d1:ec:72:57:48:07:2c:1a:6d:1f:17:9e:1f:db:
                    f3:6c:f2:12:79:02:1b:f1:e6:1a:e6:18:f8:8d:86:
                    eb:40:1b:10:eb:90:c9:c9:47:ce:82:c7:46:ac:2c:
                    d4:b2:cb:d6:a1:e0:00:88:28:a1:b8:9e:8a:36:01:
                    75:a5:2d:7b:0f:6a:36:be:fd:e6:9f:e6:e6:cb:30:
                    98:63:cf:82:3e:05:c3:cc:f9:92:c1:1e:7b:dc:dd:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:0D:48:D1:1B:0F:03:AF:55:EC:E3:D1:5C:E1:1E:72:A8:3F:50
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231362e302f32342d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:f7:ab:b5:35:7c:51:fa:ea:e7:7b:b3:b8:c2:6e:56:12:
         49:43:3f:f1:c3:93:5b:72:d5:20:19:76:60:5f:11:bd:30:62:
         11:de:c8:a3:ae:33:a7:bf:17:db:ab:6b:f2:cb:42:68:ad:c2:
         7f:c5:51:88:82:f3:42:e7:53:ef:2a:a9:9c:61:0a:51:da:ab:
         d9:8a:c9:85:cb:7e:e4:0b:15:b2:cb:f9:1f:42:62:74:23:ab:
         37:17:7d:16:c4:27:d2:e0:99:9e:be:ec:ec:69:89:a6:ba:8c:
         b4:15:53:c2:6d:fa:dd:39:03:91:9a:c9:15:8f:47:e4:b6:04:
         52:ee:ee:7c:25:76:60:ef:cf:57:42:ec:58:39:b5:b8:f1:c4:
         0d:80:b5:04:28:6a:4c:4e:ef:60:b8:c2:58:b7:5d:36:b3:39:
         f5:b4:fd:0e:17:d7:1a:95:65:c6:9f:a5:41:63:89:41:e7:dd:
         ec:32:88:9e:a6:f9:99:fd:69:e5:4c:78:47:a9:c1:aa:fd:c2:
         dc:b1:14:90:1d:7b:a9:e6:9b:2e:16:60:f7:df:1c:dd:3f:15:
         e5:6d:bb:74:af:86:45:09:c1:f8:02:ed:75:89:c8:9f:ee:67:
         0c:8f:e9:97:64:ee:20:8d:43:1f:cc:f3:db:f6:c1:74:a9:41:
         0f:7c:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:01:34 2026 by rpki-client